Description
ml85p, as included in the printer-drivers package for Mandrake Linux, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable filenames of the form "mlg85p%d".
References
- 20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package mailing-list
- 1005959 vdb-entry
- MDKSA-2003:010 vendor-advisory
- 20030121 iDEFENSE Security Advisory 01.21.03: Buffer Overflows in Mandrake Linux printer-drivers Package mailing-list
- http://www.idefense.com/advisory/01.21.03.txt